Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF0E2E58CCCE11EF93038273762E951A.roa
File: CF0E2E58CCCE11EF93038273762E951A.roa (raw, json)
Hash identifier: 0wmO8S9WpECLJ/dHsVBFb/+y3F1os+KbfucNNtwEQEs=
Subject key identifier: 5F:F4:17:28:9C:F1:28:A3:09:88:5B:42:E1:14:EA:ED:92:A8:BD:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: FAA4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF0E2E58CCCE11EF93038273762E951A.roa
Signing time: Tue 07 Jan 2025 08:10:08 +0000
ROA not before: Tue 07 Jan 2025 08:10:04 +0000
ROA not after: Mon 13 Dec 2027 08:10:04 +0000
asID: 17561
IP address blocks: 156.233.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64164 (0xfaa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 7 08:10:04 2025 GMT
Not After : Dec 13 08:10:04 2027 GMT
Subject: CN=677ce160-508d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3d:8a:a0:62:6b:36:b0:64:20:90:da:65:84:
81:4e:4b:2d:0d:81:1f:fc:b5:1c:e2:0c:11:c1:be:
08:da:71:b0:23:90:3d:52:02:9c:d6:d6:c6:28:7b:
c5:2a:de:f3:22:f0:43:04:c9:6c:ac:11:6a:23:b3:
be:63:99:49:1a:a2:14:89:0b:1b:6b:fd:3b:49:29:
e9:e0:6b:f7:f2:43:8a:ed:7b:6c:fb:f2:63:ab:cc:
c6:3b:f5:58:f6:b0:49:3b:4b:ad:bc:18:17:b1:40:
c8:85:f9:84:c4:95:fc:c9:29:57:a3:60:ab:d5:e0:
25:92:f0:0d:fe:32:d3:22:be:b6:8d:f5:2e:16:74:
0b:cd:97:a3:4e:ab:9f:40:d3:1f:9b:43:df:4b:8d:
b2:bf:c0:c0:59:6d:21:e4:1a:5a:b0:53:26:e8:9d:
f7:64:e0:1f:cf:5b:1a:73:67:67:1e:ae:e1:84:27:
1e:25:0c:bd:5b:cb:d8:83:b3:ab:bb:d3:82:7c:b2:
a3:59:69:66:73:92:03:2d:dd:8c:a0:76:1b:34:b8:
fc:e5:0f:56:36:0c:1a:18:a7:4f:9f:e9:e6:ff:05:
70:e7:ee:74:c2:92:2b:44:f2:69:8b:e4:08:ba:5c:
23:b9:41:1f:1f:71:2f:59:a9:15:40:64:92:a4:74:
20:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F4:17:28:9C:F1:28:A3:09:88:5B:42:E1:14:EA:ED:92:A8:BD:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF0E2E58CCCE11EF93038273762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.140.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5a:9b:5a:27:e1:be:37:57:b1:cb:21:3a:b4:9c:a0:85:f3:
44:fd:00:12:78:92:21:5f:26:3e:a9:91:18:f7:f2:f6:8b:b3:
5b:96:2f:fb:16:cc:b1:a5:35:dc:1e:a6:26:9d:3c:14:bd:f0:
c3:eb:82:8b:bd:c1:66:cd:57:62:71:a4:c2:5f:83:ac:3c:09:
99:3d:82:20:85:f3:f1:5d:3e:bd:59:d8:14:ab:f6:76:68:ae:
59:c5:98:c2:d7:2c:3d:c1:40:d3:e0:96:8f:9a:be:a7:bf:bc:
f7:b0:f0:ec:f9:84:5e:ac:2c:0c:c4:ee:72:a7:75:b2:8c:49:
93:db:29:62:02:34:ca:45:11:70:9f:a5:02:b6:65:73:64:eb:
37:26:b8:cb:33:b6:37:23:d9:b2:5d:6b:37:98:08:6d:d0:8b:
e1:1b:e0:d1:b0:a2:a5:e9:21:b4:63:f6:36:42:4b:45:3d:b0:
24:3a:6e:ee:60:68:52:f1:28:f2:ca:b0:ca:ea:53:bb:4f:3f:
67:d7:4f:b9:69:ff:a4:31:97:78:cd:4e:f1:10:d0:4d:c0:61:
68:ee:91:9a:ca:e8:6b:5f:b4:f2:f2:0a:8f:33:30:3d:63:8a:
65:2b:60:c3:ea:b8:3a:1e:12:a9:67:dd:c3:32:8e:4b:cd:1f:
e2:a0:7d:0f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAPqkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTA3MDgxMDA0WhcNMjcxMjEzMDgxMDA0WjAYMRYw
FAYDVQQDEw02NzdjZTE2MC01MDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1T2KoGJrNrBkIJDaZYSBTkstDYEf/LUc4gwRwb4I2nGwI5A9UgKc1tbG
KHvFKt7zIvBDBMlsrBFqI7O+Y5lJGqIUiQsba/07SSnp4Gv38kOK7Xts+/Jjq8zG
O/VY9rBJO0utvBgXsUDIhfmExJX8ySlXo2Cr1eAlkvAN/jLTIr62jfUuFnQLzZej
TqufQNMfm0PfS42yv8DAWW0h5BpasFMm6J33ZOAfz1sac2dnHq7hhCceJQy9W8vY
g7Oru9OCfLKjWWlmc5IDLd2MoHYbNLj85Q9WNgwaGKdPn+nm/wVw5+50wpIrRPJp
i+QIulwjuUEfH3EvWakVQGSSpHQgyQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF/0
Fyic8SijCYhbQuEU6u2SqL3VMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRjBFMkU1OENDQ0UxMUVGOTMwMzgyNzM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOmMMA0GCSqGSIb3DQEBCwUA
A4IBAQBYWptaJ+G+N1exyyE6tJyghfNE/QASeJIhXyY+qZEY9/L2i7Nbli/7Fsyx
pTXcHqYmnTwUvfDD64KLvcFmzVdicaTCX4OsPAmZPYIghfPxXT69WdgUq/Z2aK5Z
xZjC1yw9wUDT4JaPmr6nv7z3sPDs+YRerCwMxO5yp3WyjEmT2yliAjTKRRFwn6UC
tmVzZOs3JrjLM7Y3I9myXWs3mAht0IvhG+DRsKKl6SG0Y/Y2QktFPbAkOm7uYGhS
8SjyyrDK6lO7Tz9n10+5af+kMZd4zU7xENBNwGFo7pGayuhrX7Ty8gqPMzA9Y4pl
K2DD6rg6HhKpZ93DMo5LzR/ioH0P
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:37 2025 by rpki-client